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[57] ABSTRACT 

A visible seal or label containing a serial number is placed 
in plain view on the product packaging. The visible label 
contains the serial number as well as a first public key 
encrypted version of the serial number. A second or hidden 
label inside of the package has thereon a second a second 
encrypted version of the serial number made using a second 
public key. The hidden label may be secured inside of the 
package out of sight or may be placed on the back of the 
visible label and therefore viewable through a transparent 
case when opened or visible when peeled off. The private 
keys are known only to the manufacturer. Using a corre- 
sponding public key provided by the manufacturer, the 
consumer, law enforcement agent, or customs inspector can 
verify that the encrypted version matches the serial number. 
An advantage to this method is that only the manufacturer 
can produce matching pairs. Moreover, using a point of sale 
machine equipped with the public key the sales clerk can 
authenticate the product in front of the consumer at point of 
purchase. Additionally, in the case of a CD or other digital 
medium, the hidden label may comprise a digital watermark 
of the encrypted serial number such that a consumer, law 
enforcement agency, or customs inspector can readily detect 
a counterfeit product. 

17 Claims, 5 Drawing Sheets 
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SYSTEM FOR PROTECTION OF GOODS these patents propose to use a serial number where part or all 

AGAINST COUNTERFEITING of the are chosen at random or generated by some 

secret code. The originator keeps a copy of all numbers so 

BACKGROUND OF THE INVENTION generated and the check of authenticity is performed by 

5 verifying that the tag of a given item carries a number on the 

1. Field of the Invention list. These methods also propose some partial check using a 
The present invention generally relates to distinguishing small computer. 

authentic goods from counterfeit goods and, more Unfortunately, these methods suffer from several draw- 
particularly, to a system using public key encryption to backs. First, the need to contact the originator is unavoid- 
authenticate consumer goods. 10 able. In such case, a counterfeiter may saturate the commu- 

2, Description of the Related Art nication lines used for verification and make the process 
Counterfeit or "knock-off ' goods costs billions of dollars inefficient. Further, the fact that a database has to be kept of 

yearly to companies around the world in lost sales. Many a11 Purchases creates invasion of privacy issues for consum- 

counterfeited products are of inferior quality and therefore ers * For example, if the consumer pays using a credit card, 

may tarnish the reputations of legitimate producers when is it becomes easy to attach the consumer's name to the 

consumers mistake the counterfeit for the real thing. Even if P roduct which has beeo bou S ht > oftcn withcmt * c of 

a counterfeit good is well done, the counterfeiter has avoided the consumer. Moreover, the originator must keep an ever 

any of the expenditures in the research and development or g rowin g databasc and must make this database ^ ite 

intellectual property concerns incurred by or owed to the for ™ unforeseen amount of time. Every access to the 

legitimate producer. Consumers and producers both suffer 20 database must be secure, and one has to make certain that no 

from counterfeiting through increased prices for legitimate external P art y obtains access to ^ database. This of course 

merchandise and inferior quality of fraudulent merchandise. Peonies increasingly difficult the larger and more often the 

_ , A . . . i_ i_i data base is accessed. As is apparent, using a small scanner, 

Complete prevention again** counterfeiting is probably and ^ rf acc0 ^ u , ^ ould be cmlnter . 

unrealKhc, at least for products which are manufactured. ^ £ ^ ^ ;f ^ 

Some types of counterfeiting, often of inferior quality, are ^ numbet f afe ^ when ^ duc( ^^ged, and 

embraced by some consumers who desire to own but cannot ^ ^ qq mcaQS whjch £ eyen d authen . 

afford, expensive goods Aho, for products which are easily £ odua Qr tQ tf ^ ^ ^ 

duphcable with no or little quality loss, some consumers hidden 
prefer to protect their immediate financial interest rather 

than the interest of the legitimate producers. 30 SUMMARY OF THE INVENTION 

Nevertheless, whether it be for the sake of honesty or It is therefore an object of the present invention to to help 

because of quality concerns many, if not most, consumers protect legitimate vendors and the public against difficult to 

prefer to purchase only authentic merchandise. For these recognize counterfeits. 

consumers, it is desired to provide a system by which the 35 u is ye t another object of the present invention to aid law 

authenticity of a product can be confirmed to insure that enforcement authorities in the pursuit of counterfeiters and 

what is being paid for is in fact the real thing. identifying illegal counterfeit goods. 

It has been widely recognized by management of corpo- It is yet another object of the present invention to provide 

rations most exposed to counterfeiting, such as, for example, a system using dual seals, one readily visible and the other 

manufacturers of compact disks (CDs), videos, perfumes, 40 hidden, and public key encryption to verify the authenticity 

luxury watches, etc., that allowing the public to verify the of a product. 

authenticity of a product with a high degree of certainty According to the invention, a visible seal or label con- 
would substantially help to mitigate damages incurred from taining a serial number is placed in plain view on the product 
counterfeiters. packaging. The product could be a single item or a container 

Many ingenious anti-counterfeit schemes have been 45 of items. Of course, since serial numbers are unique, if the 

devised over the years. A typical example of a system widely consumer notices two or more items on the shelf bearing the 

used to identify a counterfeit good involves the use of seals same serial number, it is apparent that the items are coun- 

which have traditionally been used to authenticate docu- terfeit. The visible label contains a visible serial number as 

ments. Variations on this theme include watermarks, such as well as a first public key encrypted version of the serial 

are found on some international currencies, fine prints, tiny 50 number. A second or hidden label inside of the package has 

objects attached to a product or the package such as thereon a second identifier which is an encrypted version of 

holograms, and so on. The efficacy of such methods has the serial number made using a second public key. The 

dramatically decreased with the evolution of technology. hidden label may be secured inside of the package out of 

Due to progress in various technologies, if the customer can sight or may be placed on the back of the visible label and 

recognize the "seal", the counterfeiter usually can imitate it 55 therefore viewable through a transparent case when opened 

in such a way that the customer cannot detect the difference. or visible when the label is peeled off. 

For example, holographic seals verifiable by a consumer, Public key encryption involves the use of private/public 

once difficult and expensive to reproduce, are now child's key pairs. The private key is known only to the manufac- 

play with relatively inexpensive equipment. turer. Using a corresponding public key provided by the 

On the other hand, it is easy to produce seals only 60 manufacturer, the consumer or law enforcement agent can 

verifiable by the vendor. However, the cooperation of the verify that the encrypted version matches the serial number, 

consuming public to contact the vendor to verify the seal is An advantage to this method is that only the manufacturer 

a drawback. To partially overcome this difficulty, several can produce matching pairs. The wide spread availability of 

manufacturers attach a serial number to each item. It has the public key does not compromise the security of the 

been proposed to improve on this method in U.S. Pat. No. 65 private key. The public key for verification can be made 

4,463,250 to McNeightet al. and in U.S. Pat. No. 5,367,148 available on the product itself or by the manufacturer for 

Storch et al. For serial numbers to offer increased protection, example over the Internet. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing and other objects, aspects and advantages 
will be better understood from the following detailed 
description of a preferred embodiment of the invention with 
reference to the drawings, in which: 

FIG. 1 is block diagram of a first embodiment of the 
present invention; 

FIG. 2 is a sample of a possible serial number structure 
according to the present invention; 

FIG. 3 is a block diagram of a second embodiment of the 
present invention; 

FIG. 4 is a an example of the visible and hidden labels 
using binary identifiers; and 

FIG. 5 is a an example of the visible and hidden labels 
using alpha-numeric identifiers. 

DETAILED DESCRIPTION OF A PREFERRED 
EMBODIMENT OF THE INVENTION 

Referring now to the drawings, and more particularly to 
FIG. 1, there is shown a block diagram of a first embodiment 
of the present invention. As an example, the invention is 
described as it would be used for the protection of compact 
discs (CDs) which are a common medium for the sale of 
audio, software, movies, and other multi media in digital 
form and highly susceptible to counterfeiting. It is under- 
stood that the main principles and most of the details apply 
as well to any product which is sold in a sealed box or 
container. It is assumed that the box containing the CD is 
transparent. 

With reference to FIG. 1, a legitimate manufacturer 101 
commands a serial number generator 102 to generate 
sequences of serial numbers. These serial numbers can be 
just consecutive numbers, or contain uncoded and/or coded 
information as exemplified in FIG. 2. The legitimate manu- 
facturer 101 also possesses private keys, 103 and 104, and 
the corresponding public keys, 109 and 110, from private 
key/public key pairs as available now in many forms. A 
comprehensive description on the subject of private/public 
key pairs can be found in "Handbook of Applied 
Cryptography", Alfred Menezes et al., CRC Press, 1997, 
herein incorporated by reference. The serial number gener- 
ated by generator 102 is encrypted using the private keys 

103 and 104. The serial number and its encrypted version 
from 103 are communicated to printer- 1 at block 105, while 
the encrypted versions from private key 104 is communi- 
cated to printer 2 at block 106. Printer 1 at block 105 prints 
a visible label 107 and printer 2 at block 106 prints a hidden 
label 108. These labels are attached respectively in a visible 
and a bidden location to the product. The legitimate manu- 
facturer 101 make the public keys, 109 and 110, accessible 
to the customer or law enforcement agents 112, for instance 
through a link of the Internet World Wide Web (WWW) 111 . 
The customer can verify authenticity in a first stage by 
examining the visible label using public key 109, and after 
the purchase, by examining the bidden label using public 
key 110. The cashier may verify the authenticity of the 
product from the visible label in front of the customer with 
a point of sale (POS) machine 115 such as a cash register 
equipped with the appropriate public key. 

The protection coming from the hidden part in conjunc- 
tion with the serial number, the private key/public key pair 

104 and 110 can be omitted if the customer is satisfied with 
the level of authenticity verification provided by the visible 
label. Similarly, law enforcement agents may only be inter- 
ested verifying the hidden label. Using the link to the WWW 
111, or some other link to the legitimate originator, the 
customer may be able to register the serial number of the 
product that has been purchased. 



The label composition and printing flow can be further 
detailed as follows for a series of serial numbers with 
reference now to FIG. 3. The product name 201, manufac- 
turing information 202, routing information 203, and the 

5 previous serial number in the series (or some initialization 
number at first stage) 204 are sent to the serial number 
generator 205. The serial number is sent to private key 
number-2 at block 206. The encrypted versions of the serial 
number is sent to printer-2 at block 209 which prints it on 
hidden label 211. The serial number is also sent by the serial 
number generator 205 to printer- 1 at block 208, possibly in 
conjunction with an encrypted version of it, encrypted using 
private key number 1 at block 207. What is received at 
printer-1 208 is printed on the visible label 210. Printers 1 
and 2 can be part of the same printer. Controls are be made, 

15 using the public keys corresponding to private key-1, and if 
needed private key-2, to verify that visible/hidden pairs of 
label are synchronous and, when private key-1 is used, that 
the readable and encoded versions of the serial number 
match on the visible label, Printer-2 209, and/or part of 

20 printer-1 208 can be replaced by some apparatus generating 
a watermark or other alteration of the product which do not 
affect its quality in a human-perceptible way. 

Both the hidden label and the visible label, will be printed 
together by a printer linked to a computer 213. Serial 

25 numbers are composed in successive sequences incremented 
by one. Apart of the serial number will preferably contain 
information such as routing, product name, date, etc. Each 
serial number is processed by two private key encoder, 
yielding two numerical identifiers. One of the numerical 

3Q identifiers are printed on the back of the label while the serial 
number and the second identifier are printed on the front, 
which will later be glued directly to the box of the CD so a 
to be visible from the outside. The printing chain is also 
equipped with a verifier device (not shown) which checks 
that the various sets of numbers are printed in a synchronous 

35 way. Once the label is glued to the box, the hidden part is 
covered by a sticker which is very difficult to put back in 
place once peeled off. 

The second numerical identifier allows a preliminary 
check of authenticity, which should enable easy identifica- 

40 tion of the more flagrant counterfeit product labeling. 

All identifiers in numerical form can be in binary form, as 
illustrated in FIG. 4, or in alpha numerical form for more 
compactness, as exemplified in FIG. 5. The numerical 
identifiers can also be replaced by geometric figures or any 

45 other identifier. FIGS. 4 and 5 are indicative of the length of 
the data to be printed in order for private key/ public key 
pairs to be used efficiently. One may prefer to accompany the 
numerical identifiers by bar codes. Substituting bar codes 
may make public access more difficult. However, the devel- 

5 q opment of optical scanners combined with the development 
of automated reading from printed material make such 
options less obviously desirable, as the public has more 
ready access to general purpose scanners than to bar code 
readers. For instance, one could use bar codes for the visible 
label but not for the hidden label. 

In the case of opaque boxes, one can either print directly 
on the box, or on a pair of labels which should then be 
inspected before being attached to the box. 

In the case of digital watermarks, a private key may be 
used to compute numerical identifiers from the serial num- 

60 ber in the form of a binary sequence. This sequence then 
appears as the least significant bits on (initial) parts of the 
music or the movie. In the case of software, faintness of the 
digital watermark is not needed since the identifiers read by 
the consumer using a computer can easily check the authen- 

65 ticity with the serial number from one (or more) public 
key(s) ideally obtained from a server of the producer of the 
software. 
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In yet a third embodiment of the present invention, an 
even more secure, solution would be to hide the identifier in 
a smart card 215 as shown in FIG. 3. In case the smart card 
215 is tamper resistant, the use of a visible serial number 
might even be dispensed with. The smart card 215 could be 
conceived so that it self-destructs (i.e., erases its contents) 
after verification. Alternatively, it could be kept as a title and 
record of the whole resale history of the product to which it 
is attached. 

In yet another embodiment of the present invention, the 
hidden label can be replaced by a computer diskette storing 
the same information. The smart card, labels, or diskette can 
be attached to the product in a variety of ways. For example, 
they can be embedded in the container or packaging. Instead 
of a label, the information can be embedded in the product 
itself, for example, as minute quantities of inert additives in 
perfumes or other chemical products. 

While the invention has been described in terms of several 
preferred embodiments, those skilled in the art will recog- 
nize that the invention can be practiced with modification 
within the spirit and scope of the appended claims. 

We claim: 

1. A system for verifying the authenticity of a product, 
comprising: 

a first visible label on a product containing a serial number 
and a first encrypted version of said serial number 
encrypted using a first private key of a first private/ 
public key pair, said first private key known only to an 
authentic manufacture of the product; 

a first public key of said first private/public key pair for 
decrypting said first encrypted version of said serial 
number to verifying a match to said serial number, 
wherein a match indicates a first check that the product 
is authentic; 

a second label associated with the product hidden from 35 
view containing a second encrypted version of said 
serial number using a second private key of a second 
private/public key pair, said second private key known 
only to the authentic manufacture of the product; and 

a second public key of said second private/public key pair 40 
for decrypting said second encrypted version of said 
serial number to verifying a match to said serial 
number, wherein a match indicates a second check that 
the product is authentic. 

2. A system for verifying the authenticity of a product as 45 
recited in claim 1 further comprising: 

a point of sale machine equipped with said first public key 
to decrypt said first encrypted version of said serial 
number to verifying a match to said serial number in 
front of a consumer prior to purchase of the product. 50 

3. A system for verifying the authenticity of a product as 
recited in claim 1 wherein said second label comprises one 
of a smart card or a diskette for storing said second 
encrypted version of said serial number. 

4. A system for verifying the authenticity of a product as 
recited in claim 1 wherein at least one of said first and 
second public keys are available via Internet. 

5. A system for verifying the authenticity of a product as 
recited in claim 1 wherein said second label is printed on the 
back of said first visible label. 

6. A system for verifying the authenticity of a product as 
recited in claim 1 wherein said second label is a watermark. 

7. A system for verifying the authenticity of a product as 
recited in claim 1 wherein said second encrypted version of 
said serial number comprises a binary watermark. 

8. A method for verifying the authenticity of a product, 
comprising the steps of: 



55 



60 
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generating a unique serial number for a product; 

encrypting said serial number with a first private encryp- 
tion key of a first private/public encryption key pair to 
create a first encrypted serial number, said first private 
key known only to the originator of the product; 

attaching said serial number and said first encrypted serial 
number in a visible location to said product; 

providing a first public key for decrypting said first 
encrypted serial number to determine a match to said 
serial number, wherein a match indicates a first check 
that the product is authentic; 

encrypting said serial number with a second private 
encryption key of a second private/public encryption 
key pair to create a second encrypted serial number, 
said second private key known only to the originator of 
the product; 

attaching said second encrypted serial number to said 

product in a hidden location; 
providing a second public key for decrypting said second 

encrypted serial number to determine a match to said 

serial number, wherein a match indicates a second 

check that the product is authentic. 

9. A method for verifying the authenticity of a product as 
recited in claim 8, further comprising the step of storing said 
second private encryption key in one of a smart card or a 
diskette, 

10. A method for verifying the authenticity of a product as 
recited in claim 8 further comprising the step of printing said 
serial number and said first encrypted serial number on a 
front of a label. 

11. A method for verifying the authenticity of a product as 
recited in claim 10 further comprising the step of printing 
second encrypted serial number on a back of said label. 

12. A method for verifying the authenticity of a product as 
recited in claim 8 further comprising the step of providing a 
point of sale machine to verify a match between said serial 
number and said first encrypted serial number at time of 
purchase. 

13. A method for verifying the authenticity of a product as 
recited in claim 8 further comprising the step of placing said 
second encrypted serial number on said product in the form 
of a binary watermark. 

14. A method for verifying the authenticity of a product, 
comprising the steps of: 

generating a unique serial number for a product; 
encrypting said serial number with a private encryption 

key of a private/public encryption key pair to create an 

encrypted serial number, said private key known only 

to the originator of the product; 
attaching said encrypted serial number to said product in 

a hidden location; 
providing a public key for decrypting said encrypted 

serial number to determine a match to said serial 

number, wherein a match indicates an the product is 

authentic. 

15. A method for verifying the authenticity of a product as 
recited in claim 14 wherein said hidden location comprises 
a watermark. 

16. A method for verifying the authenticity of a product as 
recited in claim 14 wherein said hidden location comprises 
a binary watermark. 

17. Amethod for verifying the authenticity of a product as 
recited in claim 14 wherein said hidden location comprises 
inert ingredients in the product itself. 
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